Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6/fa5c0192-914d-3a10-95c0-c4d44e1dc5d3.roa
File:                     fa5c0192-914d-3a10-95c0-c4d44e1dc5d3.roa (raw, json)
Hash identifier:          lm/MUMdOAr+/d+aIdIqehugMUGC2/D+ngllcpwQKiXE=
Subject key identifier:   B3:11:CC:93:FD:8B:F3:53:59:69:F5:86:C0:BC:A6:F7:A0:8A:46:D0
Certificate issuer:       /CN=f952e113-8fae-44f8-9d98-a496f4e2fdc6
Certificate serial:       010D0C9F4328584A119AAF56DF535C5758CDCE00
Authority key identifier: 6A:B0:45:6B:89:75:14:9C:61:DD:E1:81:6E:F1:23:F2:97:8A:E7:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6/fa5c0192-914d-3a10-95c0-c4d44e1dc5d3.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     11714
IP address blocks:        204.234.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6/f952e113-8fae-44f8-9d98-a496f4e2fdc6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6/f952e113-8fae-44f8-9d98-a496f4e2fdc6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:af:56:df:53:5c:57:58:cd:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952e113-8fae-44f8-9d98-a496f4e2fdc6
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=594f4806-d296-421d-869f-26b8fb2cf3a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:07:47:a9:13:74:68:87:03:6b:06:8c:bc:d7:
                    66:12:4e:72:6d:6d:97:f9:c9:32:f4:48:81:ff:76:
                    d2:a6:c7:46:97:62:83:d6:fe:5b:07:83:76:a7:0c:
                    8f:1c:06:20:e5:06:df:8d:46:2b:ac:0a:13:0f:f3:
                    9b:16:66:51:7d:e6:2b:c2:df:8c:8b:c5:7e:20:08:
                    d7:3b:56:dc:4a:32:c3:18:0c:fb:0b:a0:87:b3:88:
                    97:e7:77:36:14:44:19:7b:f6:2b:fa:7a:9e:2c:de:
                    18:e1:b0:d7:e6:8b:63:76:40:43:e9:3d:82:11:df:
                    60:6a:6e:3b:82:fb:a2:df:f3:ee:b9:20:84:23:6b:
                    32:8f:bd:5e:2c:88:be:d5:75:50:14:2b:c4:63:b0:
                    c5:64:d6:c2:5e:45:58:08:ce:78:7b:74:ca:66:1a:
                    c8:2a:5a:33:c9:54:00:10:27:57:6b:e7:63:60:c1:
                    3f:2a:61:74:85:2a:55:8c:f3:0d:21:c8:e1:68:65:
                    bf:19:95:5b:10:ed:5c:5b:15:7e:d6:1b:ae:fe:fc:
                    bb:aa:a3:47:03:a2:5c:bd:5f:48:22:56:93:a6:80:
                    60:b8:10:5e:1a:63:ae:af:7d:d4:c7:f5:4e:6d:80:
                    8a:b1:a5:9b:47:1f:83:bd:fd:92:8c:87:65:39:3f:
                    fa:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:11:CC:93:FD:8B:F3:53:59:69:F5:86:C0:BC:A6:F7:A0:8A:46:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6/fa5c0192-914d-3a10-95c0-c4d44e1dc5d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6/f952e113-8fae-44f8-9d98-a496f4e2fdc6.crl

            X509v3 Authority Key Identifier:
                keyid:6A:B0:45:6B:89:75:14:9C:61:DD:E1:81:6E:F1:23:F2:97:8A:E7:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.234.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:ee:00:da:2a:02:0b:be:70:3c:4b:4a:b0:6c:e0:2c:de:11:
         b6:ae:27:91:05:04:34:d7:b0:76:7f:f4:5d:d2:40:9a:01:fc:
         9f:31:1a:4d:68:7a:89:f1:0b:64:cf:a2:30:09:2f:ff:a8:2f:
         86:30:58:72:74:d6:c9:0d:17:b8:36:a5:09:7c:a8:55:67:73:
         cf:5a:69:a6:ae:7c:6e:97:15:c1:03:06:d1:c1:74:c5:1a:d1:
         e2:47:82:84:29:5e:2e:23:6e:67:48:bf:31:38:26:5b:8d:c3:
         6c:05:78:26:1b:bb:d2:ec:2f:72:6a:a2:c3:8d:97:53:f9:44:
         a5:d3:0f:16:8f:99:f8:bd:3f:dc:79:c1:f2:80:03:1b:56:6c:
         9f:0b:ca:eb:92:33:a0:b3:bd:9c:4e:da:0e:99:38:b8:92:6b:
         a2:21:3a:b9:d6:bb:c7:b4:59:f3:42:0b:b9:b9:94:f4:f5:7b:
         d8:db:a5:05:26:25:d7:7b:c7:e8:00:b2:fb:a5:9f:1f:0d:a4:
         37:2c:a9:00:b5:32:67:86:14:6b:34:1f:66:39:13:18:b8:5d:
         51:b9:99:11:df:37:1d:0b:a3:c5:82:0e:6f:ef:14:bf:d7:dc:
         c4:61:de:2f:57:11:0a:8f:f9:39:b4:0e:3a:fa:3e:00:b5:93:
         4e:bc:9a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:30:58 2025 by rpki-client